We don't need to have editapplication (only showapplication) in the

sensitive array because it doesn't expose the consumer keypair

diff --git a/lib/util.php b/lib/util.php
index d1c084e2e7fb7f0a465351d409a01a66a1b9a56e..ecf1baa876e98ee039df5c71dcc08638156b3d9f 100644 (file)
--- a/lib/util.php
+++ b/lib/util.php
@@ -1088,8 +1088,7 @@ function common_is_sensitive($action)
         'ApiOauthRequestToken',
         'ApiOauthAccessToken',
         'ApiOauthAuthorize',
-        'showapplication',
-        'editapplication'
+        'showapplication'
     );
     $ssl = null;